SF
Product
Sd-wan Firmware
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 26Medium 13Low 0
Watch
Add Sd-wan Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1301 | 9.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device Affected: 18.3.8; 18.4.4; 19.2.1; 19.2.99 |
| CVE-2021-1300 | 9.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device Affected: 18.3.8; 18.4.4; 19.2.1; 19.2.99 |
| CVE-2021-1299 | 8.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: 18.2.0; 18.3.0; 18.3.8; 18.4.6; 19.2.3; 19.2.99; +1 more |
| CVE-2021-1298 | 8.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: 18.2.0; 18.3.0; 18.3.8; 18.4.6; 19.2.3; 19.2.99; +1 more |
| CVE-2020-3387 | 8.8 | Jul 16 | A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system Affected: through 18.3.0; 18.4.0 before 19.2.3; 19.3.0 before 20.1.1.1 |
| CVE-2020-3381 | 8.8 | Jul 16 | A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain… Affected: through 18.3.0; 18.4.0 before 19.2.3; 19.3.0 through 20.1 |
| CVE-2020-3115 | 8.8 | Jan 26 | A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the… Affected: 18.4.1; 19.1.0 |
| CVE-2019-1626 | 8.8 | Jun 20 | A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage… Affected: through 18.3.6 |
| CVE-2021-1279 | 8.6 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: 18.3.5; 18.3.8; 18.4.1; 18.4.4; 18.4.5; 19.2.0; +4 more |
| CVE-2021-1274 | 8.6 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: 18.3.5; 18.3.8; 18.4.1; 18.4.4; 18.4.5; 19.2.0; +4 more |
| CVE-2021-1273 | 8.6 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: 18.3.5; 18.3.8; 18.4.1; 18.4.4; 18.4.5; 19.2.0; +4 more |
| CVE-2020-3351 | 8.6 | Jul 16 | A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition Affected: before 17.2.7; 17.2.8 before 18.3.0 |
| CVE-2019-16012 | 8.1 | Mar 19 | A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system Affected: before 19.2.2 |
| CVE-2021-1263 | 7.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: 18.2.0; 18.3.0; 18.3.8; 18.4.6; 19.2.3; 19.2.99; +1 more |
| CVE-2021-1262 | 7.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: before 19.2.4; 19.3.0 before 20.1.2; 20.3 before 20.3.2; 20.4 |
| CVE-2021-1261 | 7.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: 18.2.0; 18.3.0; 18.3.8; 18.4.6; 19.2.3; 19.2.99; +1 more |
| CVE-2021-1260 | 7.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: 18.2.0; 18.3.0; 18.3.8; 18.4.6; 19.2.3; 19.2.99; +1 more |
| CVE-2020-3388 | 7.8 | Jul 16 | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges Affected: through 18.3.0; 18.4.0 before 19.2.2; 19.3.0 before 20.1.1 |
| CVE-2020-3379 | 7.8 | Jul 16 | A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system Affected: before 18.3.0 |
| CVE-2020-3266 | 7.8 | Mar 19 | A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges Affected: before 19.2.2 |
| CVE-2020-3265 | 7.8 | Mar 19 | A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system Affected: before 18.4.5; 19.2.0 before 19.2.2; 20.1.0 |
| CVE-2019-1625 | 7.8 | Jun 20 | A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device Affected: before 18.3.6; 18.4.0 |
| CVE-2021-1241 | 7.5 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: 18.3.5; 18.3.8; 18.4.1; 18.4.4; 18.4.5; 19.2.0; +4 more |
| CVE-2021-1278 | 7.5 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: 18.3.5; 18.3.8; 18.4.1; 18.4.4; 18.4.5; 19.2.0; +4 more |
| CVE-2020-3369 | 7.5 | Jul 16 | A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 19.2.0; 19.2.1; 19.2.097; 19.2.098 |
| CVE-2020-3405 | 7.3 | Jul 16 | A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an… Affected: through 19.2.2 |
| CVE-2019-12629 | 7.2 | Jan 26 | A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an… Affected: before 18.3.0 |
| CVE-2020-3264 | 7.1 | Mar 19 | A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device Affected: before 18.4.5; 19.2.0 before 19.2.2; 20.1.0; 20.3.0 |
| CVE-2020-3437 | 6.5 | Jul 16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying… Affected: before 19.2.3 |
| CVE-2020-3401 | 6.5 | Jul 16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain… Affected: through 19.2.2 |
| CVE-2020-3385 | 6.5 | Jul 16 | A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS)… Affected: through 18.3.0; 18.4.0 before 18.4.5; 19.2.0 before 19.2.3; 19.3.0 before 20.1.1 |
| CVE-2020-3372 | 6.5 | Jul 16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive system memory and cause a… Affected: before 19.2.3; 20.1.0 before 20.1.12 |
| CVE-2019-12619 | 6.5 | Jan 26 | A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing… Affected: through 17.2.0 |
| CVE-2019-16002 | 6.5 | Nov 26 | A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)… Affected: before 19.2.0 |
| CVE-2019-1951 | 5.8 | Aug 8 | A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters Affected: through 19.1.0 |
| CVE-2020-3468 | 5.4 | Jul 16 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an… Affected: through 19.2.2 |
| CVE-2020-3406 | 5.4 | Jul 16 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: through 19.2.2 |
| CVE-2019-16010 | 4.8 | Mar 19 | A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of… Affected: before 19.2.2 |
| CVE-2021-1233 | 4.4 | Jan 20 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device Affected: before 18.4.3 |
| CVE-2021-1305 | 4.3 | Jan 20 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify… Affected: before 20.3.2; 20.4.0 |
| CVE-2020-3378 | 4.3 | Jul 16 | A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to impact the integrity of an affected system… Affected: before 18.4.5; 19.2.0 before 19.2.3 |
Showing 41